Input validation error in jUDDI - CVE-2009-1197
Published: October 30, 2017 / Updated: August 8, 2020
Vulnerability identifier: #VU38000
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2009-1197
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to manipulate data.
Apache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to error logging of keys from uddiget.jsp.
Affected software
jUDDI
How to mitigate CVE-2009-1197
Install update from vendor's website.